Digest · Friday

Security digest: April 10, 2026

18 critical advisories.

Take stock

PyPI: 9 critical advisories (praisonaiagents, PraisonAI, gramps-webapi, aws-mcp, lollms, ajenti.plugin.core). Check with pip-audit (or: pip show <package>).
Go: 6 critical advisories (github.com/patrickhener/goshs, github.com/juju/juju, github.com/canonical/lxd, github.com/daptin/daptin). Check with govulncheck ./....
crates.io (Rust): 2 critical advisories (wasmtime, nimiq-blockchain). Check with cargo audit.
npm: 1 critical advisory (paperclipai, @paperclipai/server). Check with npm audit (or: npm ls <package>).
None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 18

GitHub-reviewed advisories rated critical, published this day (Pacific time).

PyPI 9

Check: pip-audit (or: pip show <package>)

PraisonAI has critical RCE via `type: job` workflow YAML CVE-2026-40288 CVSS 9.8 Critical
praisonaiagents <= 1.5.139 → fixed in 1.5.140; PraisonAI <= 4.5.138 → fixed in 4.5.139
PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py) CVE-2026-40111 CVSS 9.3 Critical
praisonaiagents <= 1.5.126 → fixed in 1.5.128
PraisonAI Vulnerable Untrusted Remote Template Code Execution CVE-2026-40154 CVSS 9.3 Critical
PraisonAI < 4.5.128 → fixed in 4.5.128
gramps-webapi: Zip Slip Path Traversal in Media Archive Import CVE-2026-40258 CVSS 9.1 Critical
gramps-webapi >= 1.6.0, <= 3.11.0 → fixed in 3.11.1
aws-mcp has a Command Injection Remote Code Execution Vulnerability CVE-2026-5059 CVSS 9.8 Critical
aws-mcp <= 1.7.0 → no fix listed
PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack` CVE-2026-40157 CVSS 9.4 Critical
PraisonAI >= 2.7.2, < 4.5.128 → fixed in 4.5.128
PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions CVE-2026-40289 CVSS 9.1 Critical
praisonaiagents <= 1.5.139 → fixed in 1.5.140; PraisonAI <= 4.5.138 → fixed in 4.5.139
parisneo/lollms vulnerable to stored XSS in the social feature CVE-2026-1115 CVSS 9.6 Critical
lollms < 2.2.0 → fixed in 2.2.0
ajenti.plugin.core has password bypass when 2FA is activated CVE-2026-40177 CVSS 9.1 Critical
ajenti.plugin.core < 0.112 → fixed in 0.112

Go 6

Check: govulncheck ./...

goshs has a file-based ACL authorization bypass in goshs state-changing routes CVE-2026-40189 CVSS 9.3 Critical
github.com/patrickhener/goshs <= 1.1.4 → no fix listed
Juju: CloudSpec method leaking cloud credentials CVE-2026-5412 CVSS 9.9 Critical
github.com/juju/juju < 0.0.0-20260408003526-d395054dc2c3 → fixed in 0.0.0-20260408003526-d395054dc2c3
LXD: Importing a crafted backup leads to project restriction bypass CVE-2026-34178 CVSS 9.1 Critical
github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix listed
LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf CVE-2026-34177 CVSS 9.1 Critical
github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix listed
LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin CVE-2026-34179 CVSS 9.1 Critical
github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix listed
Daptin has Unauthenticated Path Traversal and Zip Slip GHSA-9cp7-j3f8-p5jx CVSS 10.0 Critical
github.com/daptin/daptin <= 0.11.3 → fixed in 0.12.0

crates.io (Rust) 2

Check: cargo audit

Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access CVE-2026-34987 CVSS 9.2 Critical
wasmtime >= 25.0.0, < 36.0.7 → fixed in 36.0.7; wasmtime >= 37.0.0, < 42.0.2 → fixed in 42.0.2; wasmtime = 43.0.0 → fixed in 43.0.1
nimiq-blockchain is missing a wall-clock upper bound on block timestamps CVE-2026-40093 CVSS 9.1 Critical
nimiq-blockchain <= 1.3.0 → no fix listed

npm 1

Check: npm audit (or: npm ls <package>)

paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass CVE-2026-41679 CVSS 10.0 Critical
paperclipai < 2026.410.0 → fixed in 2026.410.0; @paperclipai/server < 2026.410.0 → fixed in 2026.410.0